Method and apparatus for monitoring software and signal integrity in a distributed control module system for a powertrain system
A method to monitor integrity of a signal generated and communicated in a distributed control module system for a hybrid powertrain system includes generating and verifying signal within an originating control module. A message is generated based upon the signal. The message is transmitted and received at a receiving control module. The signal is extracted from the message and its integrity is verified.
1. Method to monitor signal integrity in a distributed control module system operative to control a hybrid powertrain system, the method comprising:
establishing a single communications link between an originating control module and a receiving control module;
generating a signal in the originating control module;
verifying integrity of the signal within the originating control module including capturing primary and redundant signals based upon the signal, executing diagnostics on each of the primary and redundant signals, and comparing the primary signal with the redundant signal to validate the primary signal;
dual storing the primary signal as the primary signal and a secondary signal;
generating a message including the primary and secondary signals;
transmitting the message to the receiving control module using the single communications link;
receiving the message at the receiving control module;
decoding the primary and secondary signals from the message within the receiving control module; and
comparing the primary and secondary signals to verify integrity of the primary signal within the receiving control module.
2. The method of claim 1 , wherein the signal comprises one of an operator command signal, an input signal, and an actuator control signal.
3. The method of claim 1 , wherein dual storing the primary signal as the primary signal and the secondary signal comprises verifying integrity of each of first and second memory locations and then storing the primary signal in the first memory location and storing the primary signal in the second memory location as the secondary signal.
4. The method of claim 3 , further comprising dual storing the primary signal as the primary signal and the secondary signal in the first and second memory locations only when the primary signal is valid and the integrity of each of the first and second memory locations is verified.
5. The method of claim 1 , wherein generating the message including the signal comprises:
including a first word consisting of the primary signal;
including a second word consisting of a sequentially incrementing digital word value; and
including a third word consisting of a logic complement of a sum of the secondary signal and the second word.
6. The method of claim 1 , wherein decoding the primary and secondary signals from the message comprises:
capturing a first word from the message comprising the primary signal;
capturing a second word from the message;
capturing a third word from the message and taking a logic complement of the third word and subtracting the second word therefrom to determine a resultant comprising the secondary signal; and
validating the first word based upon the resultant.
7. The method of claim 1 , further comprising:
verifying integrity of each of first and second memory locations in the receiving control module; and
dual storing the first word in both the first and second memory locations in the receiving control module.
8. The method of claim 7 , further comprising dual storing the first word in both the first and second memory locations in the receiving control module only when the first word is validated and the integrity of each of the first and second memory locations in the receiving control module is verified.
9. The method of claim 1 , further comprising executing remedial action when the integrity of the signal is not verified within the originating control module.
10. The method of claim 1 , further comprising executing remedial action when the integrity of the signal is not verified within the receiving control module.
11. Method to monitor integrity of a signal for controlling a torque actuator communicated between an originating control module and a receiving control module in a distributed control module system for a powertrain system including a plurality of torque actuators, the method comprising:
establishing a single communications link between the originating control module and the receiving control module;
generating a signal in the originating control module;
verifying integrity of the signal within the originating control module including capturing primary and redundant signals based upon the signal, executing diagnostics on each of the primary and redundant signals, and comparing the primary signal with the redundant signal to validate the primary signal;
dual storing the primary signal as the primary signal and a secondary signal;
generating a message including the primary and secondary signals;
transmitting the message to the receiving control module using the single communications link;
receiving the message at the receiving control module;
decoding the primary and secondary signals from the message within the receiving control module;
comparing the primary and secondary signals to verify integrity of the primary signal within the receiving control module; and
operating one of the torque actuators based upon the primary signal.
12. The method of claim 11 , wherein the torque actuators include an engine, a transmission and a torque generating machine, the transmission operative to transfer power between the engine and the torque generating machine and an output member.
13. Method to monitor integrity of a signal communicated between an originating control module and a torque actuator control module in a distributed control module system for a powertrain system including a plurality of torque actuators, the method comprising:
generating a signal in the originating control module;
capturing the signal as a primary and a redundant signal;
executing diagnostics on each of the primary and redundant signals;
validating the primary signal based upon the redundant signal;
verifying integrity of each of first and second memory locations in the originating control module;
storing the primary signal in both the first and second memory locations when the primary signal is valid and the integrity of each of the first and second memory locations is verified;
establishing a single communications link to transmit the primary signal between the originating control module and the torque actuator control module;
generating a message including the primary signal stored in both the first and second memory locations; and
transmitting the message to the torque actuator control module.
14. The method of claim 13 , further comprising receiving the message at the torque actuator control module;
decoding and validating the primary signal from the received message within the torque actuator control module;
verifying integrity of first and second memory locations in the torque actuator control module; and
storing the primary signal in the first and second memory locations in the torque actuator control module when the primary signal is validated and the integrity of the first and second memory locations in the receiving control module are verified.
15. The method of claim 13 , further comprising;
receiving the message at the torque actuator control module;
decoding the primary signal from the received message within the torque actuator control module;
verifying integrity of the decoded primary signal within the torque actuator control module; and
operating one of the torque actuators based upon the verified primary signal.
16. The method of claim 13 , wherein verifying integrity of each of the first and second memory locations in the originating control module comprises determining whether contents of the first and second memory locations are identical prior to storing the primary signal therein.